RE: RE: IDS taps in a switched network (The right tools for the job)

[mjr () nfr net (Marcus J. Ranum)]

> > - I saw one of ODS's products at last week's Shadowcon which had
> > 10 100baseT
> >   links and a 1000baseT monitor/span/spy port.
>
> Yes, I should have mentioned ODS earlier. It is one of the few vendors that
> has been researching embedding IDS code in hardware on its switches. I
> haven't actually used one of these, though.

That sounds interesting. What they used to have was really just
a PC card with an intel etherexpress on it, plugged into the
management port inside the box. It was such a generic system
that you could even boot OpenBSD on the CDROM and chat with
the NIC normally. :)

Hopefully their new version's cooler - anyone got any
reliable info on its internals?

mjr.

--
Marcus J. Ranum, CEO, Network Flight Recorder, Inc.
work - http://www.nfr.net
home - http://www.clark.net/pub/mjr